Design/Logic Flaw

A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device...

CVE-2023-5984

A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device...

CVE-2023-5984

Affected products: Schneider Electric PowerLogic ION8650 and ION8800. Vulnerability: CWE-494 Download of Code Without Integrity Check allows a modified firmware to be uploaded during a firmware update initiated by an authorized admin. Impact: could result in full control over the device due to un...

CVE-2023-5984

A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device...

Rockwell Automation Stratix DTLS Recursion Flaw (CVE-2014-0221)

Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service DoS condition, or perform a man-in-the-middle attack. This plugin only works with...

HPESBHF04561 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE OmniStack Firmware Version 20230913 HPE SimpliVity 380 Gen10 G - Prior to HPE OmniStack Firmware Version 20230913 HPE SimpliVity 380...

CVE-2023-32660

Uncontrolled search path in some IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32660

Uncontrolled search path in some IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-27229

Path transversal in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path in some IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32660

Uncontrolled search path in some IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32660

CVE-2023-32660 affects Intel NUC Kit NUC6i7KYK Thunderbolt 3 Firmware Update Tool. The vulnerability is an uncontrolled search path in the installer that could allow an authenticated local attacker to escalate privileges. Affected versions are those before 46; upgrading to version 46 or later is ...

CVE-2023-32660

Uncontrolled search path in some IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32658

Unquoted search path in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-27229

Path transversal in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-27229

Path transversal in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-27229

CVE-2022-27229: Path traversal in the HDMI firmware update tool for Intel NUC Kits NUC7i3DN/NUC7i5DN/NUC7i7DN before version 1.79.1.1 may let an authenticated local user escalate privileges. Affected Intel NUC HDMI firmware update tool; root cause is improper path handling. Intel notes affected p...

kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors

A flaw was found in the Linux kernel. A potential security vulnerability in some IntelR AtomR and IntelR XeonR Scalable Processors may allow privilege escalation. This flaw may allow a privileged user to enable privilege escalation via adjacent network access...

Moderate: Red Hat Security Advisory: fwupd security update

An update for fwupd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

VulnCheck KEV: CVE-2021-46442

In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization...